MALICIOUS
120
Risk Score
Malware Insights
MITRE ATT&CK
T1566.002 Spearphishing Attachment
T1204.002 Malicious Link
The PDF file contains a heuristic firing for a malicious redirector link, specifically pointing to 'https://ttraff.com/wix?keyword=star+wars+the+force+unleashed+mod+db'. This URL is presented within the document body, suggesting a social engineering tactic to trick the user into visiting a potentially harmful site. The file also exhibits characteristics of a link farm, with numerous embedded URLs, further supporting the malicious intent.
Heuristics 3
-
PDF links to known malicious redirector infrastructure critical PDF_MALICIOUS_REDIRECTOR_LINKPDF contains a clickable URI to redirector infrastructure used by a known malicious PDF SEO/adware delivery campaign. These documents typically rely on user interaction and redirect chains rather than a PDF parser vulnerability.
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL https://ttraff.com/wix?keyword=star+wars+the+force+unleashed+mod+db
- https://7ac6b59c-2e91-461d-a8e0-201300927b20.filesusr.com/ugd/e4a001_56e884124ffb43e4a3f1e11570d57ede.pdf?index=true
- https://47a8bdc4-4c4b-407a-93d7-79e37e52bdcb.filesusr.com/ugd/4479ed_38fc9234ce394fc68aa7bc0f87cdef74.pdf?index=true
- https://5906870c-923b-424c-bcbd-55e6c94826d1.filesusr.com/ugd/9ced5d_b4623f3d1dd741c8914236c5b4376b4d.pdf?index=true
- https://b208c1f3-3775-4482-8753-5576cc26a5df.filesusr.com/ugd/59deca_16c745865d5a41ebb8ac9a54d001c50e.pdf?index=true
- https://485720ae-72a2-437b-b977-0d0706952056.filesusr.com/ugd/26938b_bb9ef228df2c4772ae31046d89843aa9.pdf?index=true
- https://e1f0b4fc-9650-4e59-bebe-19ac49cb6977.filesusr.com/ugd/dec231_1a2283e2b529499cbdc7b95532bad8c7.pdf?index=true
- https://500cce41-df19-4319-8519-22a3ef7db81e.filesusr.com/ugd/5f4192_770bcd013e4046528b7b9791eb047bd0.pdf?index=true
- https://ce144619-b5f3-4e61-acfe-6f20f530619e.filesusr.com/ugd/26938b_dbd67fe95cce41d7a9c5784258999021.pdf?index=true
- https://0e9e8a34-1d84-481f-b836-41b12d2085de.filesusr.com/ugd/027f51_4d2c35c6812c4e06843801c47d02b78e.pdf?index=true
- https://48c1cf51-4e53-489d-89f1-85145e4765fb.filesusr.com/ugd/de02f3_68b5887e300040ffbdeb4b3c90416296.pdf?index=true
- https://834b88e4-70e1-46f0-a09e-b575fe49dd21.filesusr.com/ugd/9ced5d_439ec4c5230e4e08b09d0e76c2cc0880.pdf?index=true
- https://cdn.shopify.com/s/files/1/0435/5643/8165/files/93390257461.pdf
- https://cdn.shopify.com/s/files/1/0436/5765/8521/files/chemistry_formula_booklet_for_iit_jee_resonance_gyan_sutra.pdf
- https://cdn.shopify.com/s/files/1/0462/8863/4017/files/lufuwujawetigujepuzawalag.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/xap/1.0/mm/
- http://ns.adobe.com/xap/1.0/rights/
Extracted artifacts 2
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
font_00_sfnt_off0000f505.binc50336b302d0f14abd27008fa82a6d84ffcf9071e3cc24b56ac6dfb919ad2f8c |
pdf-font-stream | PDF embedded font (sfnt) at offset 0xF505 | 5596 bytes |
font_01_sfnt_off000107f4.bin5352741ca769e45531172d1cb3ce505f52f64818536948d5f4298d816df6fe40 |
pdf-font-stream | PDF embedded font (sfnt) at offset 0x107F4 | 10640 bytes |
Open this report in the interactive analyzer, or submit your own file for analysis.